$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: t+0dxu5AxBgIjichmcoS4ZsLdx3HWkR2AK3Y16x0qxs= Subject key identifier: 82:25:87:28:7D:F6:6E:D6:9B:C7:10:76:DA:5A:65:9E:C0:0A:C9:25 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0A60 Signing time: Wed 02 Jul 2025 19:53:47 +0000 Manifest this update: Wed 02 Jul 2025 19:53:46 +0000 Manifest next update: Wed 09 Jul 2025 19:53:46 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: lMqvhMzwCaAvfbLgL4VcurFcS5DWhT4d7KMV4zZJE/0=) 2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=) 3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Jul 2 19:53:46 2025 GMT Not After : Jul 9 19:53:46 2025 GMT Subject: CN=68658e4a-47d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:b5:6b:94:7c:37:59:91:a9:6e:a3:45:7f: 8a:1a:3a:00:d6:74:ff:76:46:3f:44:83:05:66:0d: 7c:ea:ed:75:40:d8:58:1b:60:b1:4b:17:d5:f7:6e: fe:56:3b:ad:fc:0f:da:21:42:1c:c4:45:22:53:ed: 4c:08:29:38:de:a0:76:63:3e:0d:0a:80:56:4c:8d: 41:0f:14:22:49:8f:da:aa:a2:ce:2b:23:4d:12:be: 3a:17:24:62:17:87:17:52:01:1c:a8:e1:0a:46:1f: df:2c:04:ca:ee:22:66:fd:f6:db:15:ea:8f:66:43: 63:67:90:63:63:8d:b5:57:e0:df:50:2a:c8:d5:75: c8:d0:6d:e4:64:f2:fd:e7:66:8f:2e:b9:98:48:fc: da:49:0a:bf:da:d8:27:5e:97:aa:29:5f:af:98:a0: 14:47:fb:dd:9c:65:29:92:e8:43:73:8e:2e:ef:31: 55:c7:41:06:65:21:1c:24:0e:bc:f9:a9:58:93:00: 52:3b:99:5f:5d:d4:64:56:f4:6d:f7:90:4f:ec:2d: 0a:db:93:3c:04:1f:3a:73:8e:d7:fc:90:e8:c2:b1: bf:3c:d8:68:85:38:6e:fd:53:da:75:1f:9e:41:c4: d4:8a:94:8f:30:06:6a:87:9b:54:9f:51:8a:71:95: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:87:28:7D:F6:6E:D6:9B:C7:10:76:DA:5A:65:9E:C0:0A:C9:25 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:80:fe:a0:23:db:32:e8:43:95:44:0f:bf:c1:dc:e1:ad:72: d7:72:56:bc:72:db:ab:d1:86:c6:b3:97:c9:8a:e1:7c:90:9b: 52:9c:d9:5a:19:6a:15:df:b2:d6:4d:97:f8:fa:bc:5c:23:26: e0:8d:f2:52:60:83:dd:d9:0c:e4:bd:9c:80:9e:c6:41:37:f0: 70:1c:a7:c2:4c:9b:18:21:aa:cc:05:ff:91:15:bf:ef:9a:df: 26:a2:e3:8f:e2:dc:29:f7:48:a4:d6:e4:57:46:6d:fe:16:a0: b9:26:5c:65:cb:22:e9:c5:c2:d7:fd:fb:84:47:a0:b0:4b:11: 31:93:9f:84:2a:f7:c2:05:85:64:32:2e:4d:a4:1e:d9:f5:4c: bf:36:8b:2d:23:bf:96:f9:01:63:66:1e:70:39:2e:90:15:72: c4:c4:1c:04:1b:54:43:8b:d4:e5:90:0b:47:a8:ac:34:5d:16: e7:e0:76:54:0d:4c:8a:19:ed:5a:ad:e7:d9:99:97:8c:30:b5: 58:b5:dc:1e:3d:91:e9:b4:e8:91:6e:93:99:54:6f:1d:c3:a0: d2:e2:6b:88:8b:1f:5a:d7:59:5c:00:1a:91:08:89:0e:c7:05: 58:bf:a5:23:f8:77:09:a5:fe:33:f2:0d:39:8d:89:0a:fa:f4: bf:eb:d8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjUwNzAyMTk1MzQ2WhcNMjUwNzA5MTk1MzQ2WjAYMRYwFAYD VQQDEw02ODY1OGU0YS00N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGa1a5R8N1mRqW6jRX+KGjoA1nT/dkY/RIMFZg186u11QNhYG2CxSxfV927+ Vjut/A/aIUIcxEUiU+1MCCk43qB2Yz4NCoBWTI1BDxQiSY/aqqLOKyNNEr46FyRi F4cXUgEcqOEKRh/fLATK7iJm/fbbFeqPZkNjZ5BjY421V+DfUCrI1XXI0G3kZPL9 52aPLrmYSPzaSQq/2tgnXpeqKV+vmKAUR/vdnGUpkuhDc44u7zFVx0EGZSEcJA68 +alYkwBSO5lfXdRkVvRt95BP7C0K25M8BB86c47X/JDowrG/PNhohThu/VPadR+e QcTUipSPMAZqh5tUn1GKcZXWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIlhyh9 9m7Wm8cQdtpaZZ7ACsklMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWgP6gI9sy6EOVRA+/wdzhrXLXcla8ctur0YbGs5fJiuF8kJtSnNla GWoV37LWTZf4+rxcIybgjfJSYIPd2QzkvZyAnsZBN/BwHKfCTJsYIarMBf+RFb/v mt8mouOP4twp90ik1uRXRm3+FqC5JlxlyyLpxcLX/fuER6CwSxExk5+EKvfCBYVk Mi5NpB7Z9Uy/NostI7+W+QFjZh5wOS6QFXLExBwEG1RDi9TlkAtHqKw0XRbn4HZU DUyKGe1arefZmZeMMLVYtdwePZHptOiRbpOZVG8dw6DS4muIix9a11lcABqRCIkO xwVYv6Uj+HcJpf4z8g05jYkK+vS/69jK -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:47 2025 by rpki-client